{"id":247073,"date":"2026-11-11T07:10:35","date_gmt":"2026-11-11T13:10:35","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/11\/sglang-rce-exploit-breaches-near-ai-steals-data-from-18-agents-and-about-100-users"},"modified":"2026-11-11T07:10:35","modified_gmt":"2026-11-11T13:10:35","slug":"sglang-rce-exploit-breaches-near-ai-steals-data-from-18-agents-and-about-100-users","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/11\/sglang-rce-exploit-breaches-near-ai-steals-data-from-18-agents-and-about-100-users","title":{"rendered":"SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users"},"content":{"rendered":"\n<p>An attacker exploited a remote code execution flaw in <strong>SGLang<\/strong>, an open-source inference engine, and ran code on one of NEAR AI\u2019s inference servers last Sunday.<\/p>\n<p>The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes requests inside a trusted execution environment (TEE) designed to keep them private even from the company itself.<\/p>\n<p>But the TEE \u201cdoes not protect against a vulnerability in the software running inside the environment,\u201d the company said. SGLang runs inside the TEE, which is how the attacker could reach requests there.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI\u2019s inference servers last Sunday. The attacker could also have seen requests being processed on that server that day, including requests sent in confidential mode, the company said earlier this week. That mode processes [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-247073","post","type-post","status-publish","format-standard","hentry","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/247073","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=247073"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/247073\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=247073"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=247073"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=247073"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}